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(57) Abstract 

This invention relates to metered usage, and pre- 
vention of piracy, of computer software and other in- 
tellectual property existing in electronic digital for- 
mat. The end result of the invention enables soft- 
ware-on-demand and software subscription services by 
employing a transformation filter (104) to perpetually 
regulate, meter, and charge for the usage of software 
products. The apparatus is implemented as a virtually 
integral part of the operating system that monitors and 
"niter" all read, write, and open/execute acccess to and 
from the I/O devices (106). As the protected material 
is being accessed, the transformation filter (104) posi- 
tions itself in the path required for loading the mate- 
rial through the file system and application layers. The 
material enters the transformation filter (104) in its en- 
crypted state and is decrypted in real-time as it goes 
through. The material is then handed over to the op- 
erating system components (107/108) to fulfill the user 
access requests. 
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Method and System of Dynamic Transformation of 
Encrypted Material 

Background of The Invention 

5 

1. The Technical Field 

This invention relates to metered usage of computer 
software and other intellectual property existing in 
10 electronic digital format. The end result of the invention 
enables services such as software-on-demand and software 
subscription. This invention can also be applied to the 
prevention of piracy of computer software and other 
intellectual property. 

15 

2 • Description Of The Prior Art 



In the current consumer market, computer software and 
other intellectual property existing in digital format are 

2 0 primarily marketed the same as other hard goods commodities. 
However, while video tapes and other hard goods are rented 
routinely, software products typically are still available 
only on a purchase basis. As a result, at least two useful 
services generally are not available: software-on-demand and 

25 software subscription. Software-on-demand is a service that 
would allow consumers to pay for software products on a per- 
use basis. Software subscription is a service that would 
make one or more software products available to consumers on 
a periodic subscription basis such as once a month. 

30 Despite the obvious benefits of these services, the 

inherent nature of software products has posed significant 
technical challenges to enabling technology providers. In 
order to successfully support these services, the enabling 
technology should meet the following criteria: 

35 

I. Security. Software product made available in software- 
on-demand and subscription format should be protected 
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and regulated in a totally secure manner. The enabling 
technology must defend the software fro, the most 
skilled and determined hackers. In P»^cular. at no 
time should the software in its original state be 
present on an intermediate storage medium, because this 
simply opens the door for skilled system level hackers, 
^ere is also the possibility that utilities would 
become available that would maKe such an intermediate 
storage medium accessible to the public. 
Non-xLrusiveness. The enabling technology should not 
require .edification of source code in order to protect 
anf-eter usage. In contrast, intrusive *«*nology 
e^eds itself in the source code of software 
and requires recompilation of the software This effort 

not impose significant overhead while protecting, 
,. launching, and metering usage of the software product. 

Typical overhead introduced by enabling technology 
Eludes the need for extra RAM and hard disk storage 
space, the launching of the protecting process ^fore 
decrypting protected software, and competition for other 
system resources, such as the CPU, while monitoring 

XV. immunity From System Clock Keset. By altering a 

router system's clock setting, users of software 
deducts Zn significantly prolong their allowed usage 
period and consequently compromise the effectiveness of 
software-on-demand and software subscription services. 
Z enabling technology should be able to detect and 
take counter-measure actions against system clock 

3S V. Per^ual Protection And Metering, once a 

publisher puts his software under the Paction and 
control of the enabling technology, it should be 



- 2 - 



BNSDOC1D' <WO 9916205A1J_> 



WO 99/16205 



PCI7US98/19618 



perpetually protected and controlled. Subsequent copies 
and reinstallation should not disable the protection and 
control . 

VI. User Friendliness. The enabling technology should not 
5 alter a computer user's environment in a way that causes 

changes in system settings that are noticeable to the 
user. The user interface should be totally intuitive 
and easy to use. 

10 Available prior art protection techniques are based on 

"wrapper" and "redirection" technologies. A "wrapper" often 
takes the form of a operating system shell program or an 
altered start-up code section of the protected software. Its 
function is to shield direct access to the protected 
15 software. When the protected software is accessed by users, 
the "wrapper" will be executed first. The protected software 
in its encrypted state will be then decrypted and restored on 
a temporary storage medium in its original state. The 
"wrapper" will then redirect the access to the restored 
20 software on the temporary storage medium. 

A system developed by TestDrive Corporation in Santa 
Clara, Calif., offers try-bef ore-buy software evaluation 
services. This system converts an original version of 
software to a disabled version that may be used for a limited 
25 trial or evaluation period. If purchase of software is 
desired, an unlock code may be purchased that converts the 
software to its original state. In a preferred embodiment, 
this prior art system is applied to chosen material, such as 
a computer program, and a portion of the material is 
30 separated from the original material. In this way, a 

denatured version of the original material that includes the 
separated portion of the material and the residual portion of 
the material is produced. During the trial period, the 
denatured version of the material is placed into a temporary 
35 storage medium but only the separated portion is readily 
accessed by a system user. Alternatively, the separated 
portion of the material may be replaced with a modified 
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portion, for example, a counter may be included to limit the 
nulber of times the material may be accessed, or interfering 
Serial may be added to the original material such as beeps 
in an audio signal, or a mask in a visual sxgnal. 

Several drawbacks in these "wrapper" and "redirection- 
technology based systems are obvious. 

Security flaw. Since "wrapper" and "redirection 
technology requires a temporary storage medium to 
physically host either all the restored software or the 
residual portion of the software in its original state 
the very existence of the material in its original state 
accessible by a system user makes the system vulnerable 
to hacker attacks. It is possible for an operating 
system expert to gain access to the material in its 
original state and redistribute a pirated version of the 
material. A utility software program could also 
possibly be developed to perform this act of piracy 
repeatedly and can be made available in the public 
domain to further damage the effectiveness of the 
enabled services. While wrapper and redirectl °» 
technologies can protect software from novice attacks, 
they are not highly secure against experts. 

System overhead. Launching the "wrapper" program, 
physically storing the restored software m its original 
state, and creating and administrating the temporary 
storage medium all impose delay before launching the 
user desired software product. These activities also 
compete for other system resources with other processes 
run by the operating system. 

Space overhead. Storage of the restored software 
product in its original state in Random Access Memory 
^RAM) will require greater than 100% more RAM space than 
the protected software normally requires. In a multiple 
process operating system, where multiple protected 



25 II. 



30 

III. 

35 
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software can be executed simultaneously, this overhead 
requirement can be multiplied and significantly impact 
the system's performance. 

5 iv. Unwelcome Nuisance. The creation of a temporary storage 
medium in a computer system, such as a virtual device, 
is an artifact normally unwelcome and foreign to 
computer system users. Therefore, the user will 
eventually want to purchase the original material in its 
10 entirety to eliminate the nuisance and artifacts 

generated by wrapper and redirection technologies. 
Thus, these technologies do not lend themselves to 
providing perpetual usage metering and protection 
services . 



15 



20 



Currently there is no known highly secure method that 
provides real time decryption of encrypted software or other 
electronic material without redirecting and storing the 
decrypted material on a temporary medium. 

Summary Of The invention 



The present invention provides a method and system that 
enables software-on-demand and software subscription services 
25 based on a dynamic transformation filter technology. The 
invention is also useful in the distribution of other 
electronic materials. The apparatus utilized in this 
invention does not create any intermediate storage of 
decrypted material that is under the protection of this 

30 technology. Instead, the apparatus is implemented as a 

virtually integral part of the operating system that monitors 
and "filters" all read, write, and open/execute access to and 
from the I/O devices, such as a hard drive. As the protected 
material is being accessed for read, write or open/execute, 

35 the transformation filter positions itself in the critical 
path which is required for loading the material through the 
low level file system layer to the high level application 



- 5 - 



9916205A1J_> 



PCT/US98/19618 

WO 99/16205 

layer. The serial enters the transformation itS 
encrypted state. The transformation filter decrypts the 
Serial as it goes through, and hands over the material in 
its original state to the upper level operating system 
S c ompTn £ to fulfill the access requests. Because the need 
for intermediate storage is eliminated, the *°°™*<* 
material in its original state is only visile to integral 
parts of the operating system components and not to other 
System users. As a result, security is significantly 
10 improved over prior art systems. 

The transformation filter is formed by converting a 
programmable service that is provided by the operating system 
for a totally different purpose into a -filtering- security 
and regulating system. Preferably, in the case of Windows 
x5 95" software, this programmable service is a virt ual 

driver; and in the case of windows m~ it is a Kernel driver 

B ° del The present invention can operate with material that is 
not intrusively embedded inside the protected ^» 
„ provides an utility that encrypts any material with a few 
ILy to follow steps. The invention adopts standard data 
Inchon mechanisms made available by the v.s government 
and commercial companies. However, the 

invention provides enhanced Key management -P-^£ 
» further ensure security of the encrypted A ^ 
medial called on the consumer's PC goes through tw* 
encryption processes. The second encryption process requires 
a Really unigue Key generated from the computer user's 
untgue ID. The dynamic generation of the Key ensures that no 
,0 unlocking Key can be obtained direct* from files stored on 

the hard disK. 

The present invention maKe it possible for the 
transformation filter to perpetually regulate, meter, and 
charge for the usage of software products and other 
35 Intellectual property existing in digital format. Such 

material can be ordered on-demand multiple times and can also 
be available on a subscription basis, copying of the 
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installed material to other computers will only produce an 
encrypted version of the material. However, a permanent copy 
of the decrypted material can be generated at the discretion 
of its publisher. 
5 The invention provides components of the system that 

allows users of such material to connect via a modem or 
existing private network, and Internet connection to a 
clearing house server. The clearing house server will in 
turn generate an authorization code for enabling metered 

10 usage of the material upon receiving an order and a charge 
card number. Currently acceptable charge cards include 
regular credit cards and debit cards. Future payment methods 
w iH illustratively include smart cards and digital cash. 
These components of the system will also be able to process 

15 customer returns and exchanges. 

The present invention is able to operate with material 
distributed via all possible channels, such as electronic 
material distribution over the Internet, CD-ROMs distributed 
at physical store fronts, DVDs, VCDs, cable modem, and other 

20 broadcasting channels. 

The present invention also operates in an network 
environment where access to material over a network file 
system is equally regulated and metered by the system. 

25 Brief Description Of The Drawings 

These and other objects, features and advantages of the 
invention will be more readily apparent from the following 
detailed description of the invention in which: 

30 Figure 1 is a high level architecture diagram depicting 

components of the system, their relative positions and 
interrelationships and the direction of data flow; 

Figure 2 depicts the process of encrypting and packaging 
of original material into a protected state; 

35 Figure 3 depicts the process of installing the protected 

product onto a user's computer, including the generation of a 
unique ID and a second encryption with a user unique key; and 
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Figure 4 is a flowchart depicting the internal process 
flow of the transformation filter. 

Detailed Description Of The Invention 

5 The current invention is a method and apparatus that is 

The ^ urrent . nternals of an operating system, such as 

l^r^TL-^ of encrypted material in real t.me 

en * .. nn to , temporary storage medium. 

" Klth ° Ut Tnv^tionTxXows^o^re products an, other 

consequently the in ^ ^ 

^tion - To"e made available for regulated - -tered 

« aSa9e in the preferred embodiment of the present invention, a 
transforation filter is implemented as a Kernel level 
transformat ma lti-process operating system 

program «*-»^»^ material is application 

environment, and the en yp ^ ^ ^ 

.. ST^JTS as the dilution of audio or visual 

^gurtYlsTnlgh^l architecture diagram depicting 
the position and function of the transformation filter 

^ Tigrievet yS apriication programs, including local 
25 Hrgh level appli eatio»s 101, 102, 101, request 

access to open/execute activities. 

106 " Zst'Z submitted « the operating system 

These reguest „ anager 107 or a networK 
30 components » ^ delayed to a file system driver 

ZTJT^r^ system driver layer 10* which - also 
on tie Kernel level. In accordance with the xnventxon, 

„ ,.it er 104 is positioned between the 
transformation filter 10 P ^ ^ iayer 
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driver; and in the case of Windows NT" it is implemented as a 
kernel driver model. 

If access requests coming from local and/or network 
applications to file system drivers are considered to be 
5 going "downstream", then all data being read from I/O devices 
to upper layers of the operating system are considered to be 
going "upstream". Both downstream (from application down to 
file system) and upstream (from file system to application) 
data must go through a particular path which is referred to 
10 as the critical path in this document. Transformation filter 
104 is in the critical path. 

Whenever data passes through the transformation filter 
in an upstream direction, the transformation filter performs 
the necessary transformation that converts the encrypted 
15 software into its original state. The software that has been 
transferred to its original state is then handed over to 
upper layers of the operating system. If the request is from 
an application, e.g., an image viewer to open a file for 
display, the transformed software material will eventually be 
20 handed over to the application. From the requesting 

application's perspective, opening this encrypted software 
material is no different from opening any other original 
software material. The transformation process is totally 
transparent to the requesting application. If the request is 
25 to execute the file (e.g., double mouse clicking on the file) 
and the original software material is an executable program, 
the transformed software will be handed over to the operating 
system's loader to execute in memory. This process is 
considered "filtering" because encrypted software moving 
30 upstream goes into the apparatus and comes out in its 

decrypted state as if it went through a filtering device. No 
intermediate storage of the decrypted software is ever 
exposed to system users during the whole "filtering" process. 
All handing-over and decrypting processes take place inside 
35 the operating system as internal activities in a highly 
secure fashion. 
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Transforation filter 104 is implemented as if it were 

• ! , oart of the operating system. Extra security 
an integral part of th P ion fUter 104 so ^ it 

measures are built «*° upstream and downstream 

not only is «pable of filter 9 P ^ ^ 

5 data, but also «~^^ fl ^«---«- to prevent any 
operating system and taxes cou 
security breaches from taking place. 

Figure 2 is a bloc* diagram depicting the process of 

encryptfng ~-£%^^>£> 

so r flinction /p 202 in an encryption process P E 

transformation function j E 

Z Z encryption process preferably is a standard 

1^1 Locess such as DBS or KSA. The result of this 
encryption process s re 204< Hhlch »ay be 

" Various distribution channels, such 

recmlation and metering of the 

,. rtwar^rtreTddrto ^. ~ iorr -- - * 

liC ense — er 2 0, a client^ppl ^ 
transformation filter 207 an P^ ^ ^ ^ ^ 

d ata 208. ^""".^rina ^ license database including data 
responsible for ^ interfacing with use rs of 

" "^0= serial «„ and - 
the encrypted software material upon °* » 

authored usage period, client = ^.»r^-- 
3. rr^K^T- - - encrypted software material 
r "nd to receive from the clearinghouse server an 

M E , ana x.o activity may also 

appropriate -f^^^; ^ suc/as provision of 

riritT/ert - — - «- 

a credit or o capability of obtaining 

35 application may also in£o rmation and downloading 

pricing, promotion and upgr<*« 
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additional software. Transformation filter 207 is the 
software which controls access to the encrypted software 
material M E . Further details of this software are described 
in conjunction with Figures 1 and 4. Product specific 
5 signature data 208 is a code unique to the particular 
encrypted software material M E . 

The output of process 209 is a single output file M, 
210, which is the pre-installation encrypted software 
material and comprises all the input components 204, 205, 
10 206, 207, 208. Process 209 preferably just combines 

components 204, 205, 206, 207, 208 into a single software 
product. Alternatively, process 209 could also involve an 
additional encryption process. 

In the preferred embodiment of the invention, output 
15 file M, takes on the name, icon and other properties of the 
original software material. Therefore, from an external 
point of view, this file appears to be identical to the 
original software. This embodiment is primarily for the 
purpose of eliminating extra steps for software publishers in 
20 packaging their software products. 

Subsequently, software publishers can use their favorite 
installation packaging utility, such as installShield™, to 
put their software into a normal installation package as if 
the encryption processes of Figure 2 had never taken place. 
25 Figure 3 is a block diagram depicting the process of 

installing encrypted software material onto a user's PC. in 
a preferred embodiment, output file M, launches its own 
installation process 302 after a user goes through normal 
procedures for installing the software just as if the 
30 software had never been encrypted. Installation process P, 
302 spawns off the key components of the pre-installation 
software material M, 210/301. First, a license manager 303, c 
client application 304 and a transformation filter 305 are 
extracted and installed in proper hidden places in the 
35 system. Product specific signature data 306 and the 
encrypted software M E are also obtained. 



- 11 - 



BNSDOCID: <WO. 9916205A1_I_> 



PCT/US98/19618 

WO 99/16205 

Simultaneously, user profile data and operating system 
•! (nformation, represented as D, 307 is transformed by 
specific information, P process p„ 312 to generate 

. ^^£%rJ£L m Z, number" of conventional 

!H Advantageously, we prefer to use a time stamp with a 

• ™ measured in milliseconds in generating the unique 
precision »^ u "^ ^ two users wi n install their 

^rit -billisecond is virtually zero, unique 
X. XD 313 Is subsequently used in all phases and components of 

^ Tr^ct specific signature data 30*. unique ID 313 and 
the encrypted software H E are supplied to a process P B 309. 
Process Z -es the inverse of the transformation function h 
IS to decrypt the software material and thereby restore the 
originlfmaterial ^. Such decryption processes are well 
^nown Then, it immediately re-encrypts M„ with a unique 
entrvPtioHey based on the unique ID 313 and the product 
sTecIfi stature data 306. A gain , standard encryption 
,0 ^cesses such as DES or KS* may - 

uniquely encrypted software material M„ 310. Th 
material >. is then installed above driver layer 105 (See 

Fl9 ' in' the preferred embodiment, the invention never stores 
» the unique encryption Key used for the generation o 
Whenever necessary, this unique key can Be 
generated using the same inputs (the unique I and ^e 
regen _« mature data) and key generation process, 

product ■»«" f "£^£ fly „ a Ls it extremely difficult to 
This Key «- 
^neTy al o assies that no identical encrypted software 
lateral exists on any two user-s computers once the software 

18 'Tthfend of instaliation, a license database DL 311 is 

^ *H*f *eet>s all license information, a usage 
Srr**- -formation to successfully 
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implement a usage regulation and metering process described 
below in conjunction with Figure 4. The license database 
identifies the encrypted software as being "registered" , that 
is, being subject to the system of the present invention. 
5 The database is also stored in the computer system. 

Referring to Figure 1, transformation filter 104 is 
installed in the computer system so that it intercepts all 
requests to access software files resident on I/O devices 
106. In the Windows 95" operating system this is accomplished 
10 by installing the transformation filter as a virtual device 
driver. In the Windows NT™ operating system this is 
accomplished by installing the transformation filter as a 
kernel driver model. 

User activities such as read, write, execute the 
15 software or open software material for viewing are processed 
by the operating system. A higher level operating system 
process (e.g., a local or network application 101, 102, 103 
of Figure 1) is responsible for passing a request for such 
activities downstream to driver layer 105 through 
20 transformation filter 104. 

Figure 4 illustrates the detailed internal process flow 
of the transformation filter. As indicated by box 416, the 
transformation filter continuously monitors the operating 
system for all I/O requests. When such a request reaches the 
25 transformation filter, it initiates the get software + 

license info process 403. This process obtains the license 
information (if any) for the requested software including the 
latest status on the software's usage, license, authorization 
code, expiration date, product specific signature data 
30 208/306, along with other pertinent information. 

Subsequently, two validation tests are applied: a test if 
the software is registered (step 406) and a test if the 
license is valid (step 407). If the requested software was 
not registered, the transformation filter simply transfers 
35 control back to the operating system's requesting process at 
step 413 without taking any further actions. If the software 
is registered, the transformation filter checks at step 407 
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. <. a valid license for it. In case there is no 
lo Prom P t The' user to order more usage or purchase the 

""""-IT' order entry process is handled by the client 
s The order entry P client application 

^"Ts'^rrTcoIpurer " a clearings* server via a 
connects the user s ^ oonnections . ne clearinghouse 

°\Z receiving * valid credit card or dehit card 
„ ZZ. r derates an authori,ation code to activate 
legitimate usage o£ the registered software. 

If a valid license for the software is present and the 
Is within the authorized usage period, the 
execut.cn « . security ^itor process 408 

f^ a scan of any third party processes that might he 
" aTemPtTg toTi^acK data going out of the transformation 
aflr b ein, decrypted. In case that sulcus 
activity is present in the operating system, the 
^3^^ filter taxes countermeasures to elimmate the 

25 key and the inverse of encryption process 309 the 

transforation fitter th** «««tt~ i* ^f^!^ ^ 
encrypted portion of the software in the decrypting 
encrypt p decrypted software in its 

transformation process 

original state is then handed-over at step 413 to the 

The operating system may now 
30 ZZ2ZZZZ. - execution or feed the decrypted 
software Material to an application that requested access. 
Once the decrypted software is handed-over to the 
Tina Access the transformation filter starts a usage 
requesting process ^ ^ 

" reTr^ or filter continually tests at step the 
^unl of usage for a violation of the license terms or 
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expiration of the license. In case there is a violation of 
the terms of the license for the software or the license has 
expired, the transformation filter starts a process at step 
415 to launch the license manager. The license manager is 
5 responsible for properly maintaining and updating the license 
database, and interacting with the user by prompting him with 
various messages and taking in the user's feedback. Whenever 
necessary, the license manager is responsible for terminating 
usage of the registered software material after given the 
10 user warnings and a reasonable amount of time to respond. 
The license manager may transfer control to the client 
application to prompt the user to order more usage when the 

license expires. 

The present invention enables the whole process of 
15 encrypting, registering, ordering, activating, decrypting, 
regulating and metering the usage of software materials. 
Business services that will benefit consumers, including but 
not limited to, software-on-demand, software rental, software 
subscription, try-bef ore-buy , can be adequately supported by 
2 0 the method and system of this invention. 

Two examples of the application of the invention in the 
provision of software are software-on-demand and software 
subscription services. 

The essence of software-on-demand services is to make 
25 software available at the consumer's finger tip whenever the 
consumer desires to use the software. The software material 
made available through this service can be application 
software, such as accounting software, games, education and 
entertainment software, CAD software, etc. The software 
30 material can also be any electronically stored material such 
as audio, video, other forms of multimedia content, or it 
simply takes the form of plain binary or text file. This 
service is supported by the invention in the following way: 
1. A publisher uses the invention to encrypt his software 
35 materials following the steps of Figure l. The encrypted 
software material becomes a registered software known to a 
clearinghouse server. 
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, The software material is then packaged using any 
commercially available installation packaging "*~%JZ 
example mstalishield . Multiple program or other Bot«,M 
Serial fro* one or several publishers may be coined in 

S T ^ZZTV^ is distributed - users through 
triors channels, such as the Intemet/www, CD-HOM. OVD, or 

T' The user choose from an online based electronic catalog 
1. listing all available material in the software package. He 
or s^e decides to install one or more software programs or 
other material onto his or her computer following the steps 

5! ^ruser then decides to use one of the software 

15 programs or other material. 

6 The user issues an execute command or invokes an 
Llication to access the software program or other material. 
T The user is prompted via the client application .o^pay 
for such usage with a credit card or other type deb!t card 

" r^The user is connected to a clearinghouse server facility 
via modem or over Internet connection. If ^ere is a 
f irewall (for corporate users) . the invention will operate 
IZ ^e Procedure to pass through the authorization process 

" f ^^review* pricing information retrieved «om the 
clearinghouse server by the client application. 

10 The user confirms the order. 

11 clearinghouse server issues an authorization code. 
,. x : The authori 2 ation code activates the desired software 

material. The usage counter is updated to record this 

ordering session. ^^ m _ nf , 

13 The user reissues the execution or access command. 

14 The transformation filter dynamically perform the 
35 necessary transformation to enable proper usage of 

software material. 
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15. Usage is metered and regulated by the license manager 
application. 

Software subscription services follow the similar steps 
5 of software-on-demand services, except the payment for the 
services is on a monthly basis. Users also normally have the 
option of using multiple products every month. 

Another example of the application of the invention is 
in the distribution of audio/visual or textual material. 
10 Such material may be encrypted, prepared and distributed in 
essentially the same fashion as application software. The 
user then selects the material he wants to see or hear and 
obtains it in a fashion similar to the way he obtains the 
software except that in this case the visual material is 
15 displayed and the audio material is used to drive a speaker 
system. 
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•\ been installed comprising the steps of: 

nate " a monito^ a" r^-t. tor access to the encrypt 

5 material; 

upon receiving a request for access to the 

encrypted material, obtaining the material; 

determining if a license exists to use the 

material; . 
l0 if a license exists, decoding the encrypted 

^ determining if the usage of the material complies 
15 with the license. 

2 The method of claim 1 wherein the encrypted 

114 fna a first key that is unxque to a 

20 encrypted. 

3. The method of claim 2 wherein the first key 
includes a time stamp. 
25 4 . The method of claim 2 wherein the time stamp has a 

precision measured in milliseconds. 

5 The method of claim 2 further comprising 
of generating from the first key and the second key a thxrd 
30 key for use in decoding the encrypted mater xal. 

6 . The method of claim 1 wherein the encrypted 
ferial is installed in the computer by decrypting a first 
IT:Z o tL material to produce an unencrypted version and 
35 Ten re-encrypting the material using a first key that xs 
untgue to a user and a second key that is unxque to the 
material that is encrypted. 
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7. The method of claim 1 further comprising the step 
of obtaining a license to use the material if it is found 
that a license does not exist. 

5 8. The method of claim 1 further comprising the step 

of performing a security check of the computer before 
decrypting the encrypted material. 

9. The method of claim 1 wherein the encrypted 
10 material is a computer program. 

10. The method of claim 1 wherein a software package is 
installed on the computer, said software package comprising 
an encrypted portion, a unique code, and decrypting software 

15 for decrypting the encrypted portion, said method comprising 

the steps of: 

separating from the software package the encrypted 
portion, the unique code and the decryption software; 
storing said decryption software so that it is 
20 invoked whenever an attempt is made to access the 

encrypted portion; 

generating a unique ID from profile data and an 
encryption algorithm; 

decrypting the encrypted portion of the software to 
25 produce an unencrypted portion; 

encrypting the unencrypted portion using the unique 
ID and the unique code to produce said encrypted 
software; and 

storing the encrypted software in said computer. 

30 

11. The method of claim 10 wherein the unique ID 
includes a time stamp. 

12. The method of claim 11 wherein the time stamp has a 
35 precision measured in milliseconds. 
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13. A method for installing software on a computer 
said software comprising an encrypted portion, a unique code, 
a^ decrypting software for decrypting the encrypted portion. 

said method comprising the steps of: nortion 
separating from the software the encrypted portion, 
the unique code and the decryption software; 

storing said decryption software so that it is 
invoked whenever an attempt is made to access the 

, ^igue XO from profile data and an 

en °Tecr;:r rincrypted portion of the software to 

oroduce an unencrypted portion; 

encrypting the unencrypted portion using the unique 
X D and the unique ID code to produce a second encrypted 

portion; - , . . , 

storing the second encrypted portxon xn saxd 

computer . 

!0 14. Apparatus for operating a computer on which 

encrypted material has been stored comprising: 

means for monitoring all requests for access to the 

encrypted material; 

^eans for obtaining the encrypted material upon 

25 receiving a request for access to said ™**™ l > 

means for determining if a. license exists to use 

the material; , r _ al . 

means for decoding the encrypted material xn real 

time if a license exists; 
30 means for monitoring how much the encrypted 

material is used; and m . o ■ , 

means for determining if the usage of the materxal 

complies with the license. 

15. The apparatus of claim 14 wherein the encrypted 
material is a computer program. 
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16. The apparatus of claim 14 as implemented in a 
virtual device driver in a Windows 95™ operating system. 

17. The apparatus of claim 14 as implemented in a 
5 kernel model driver in a Windows NT™ operating system. 
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